Free tool · CentaurNexus

Test your PAC file - which line fires for which URL?

Paste your PAC file or upload it, enter one or more test URLs. You'll instantly see the result (DIRECT/PROXY) and which return line in the source produced it.

Your PAC file never leaves your machine: evaluation runs in an isolated browser sandbox with no network access.

PAC file

Paste the text or choose a file.

FindProxyForURL(url, host)

Result

Hints

Build and test it here.

Need versioning, four-eyes approval and rollback? CentaurNexus is the sovereign cockpit for your Zscaler world. EU hosting, GDPR-compliant.

View live demo

Frequently asked questions

What does the PAC Tester do?

It runs the FindProxyForURL function of your PAC file against one or more test URLs and shows the result (DIRECT or PROXY host:port) plus which return line in the source produced it.

Does my PAC file leave my machine?

No. Evaluation runs entirely in the browser in an isolated sandbox (sandboxed iframe without network or parent-window access); there is no server round trip.

Can the PAC Tester simulate real DNS resolution?

No, deliberately not. Real DNS resolution would require a network request and would contradict the promise that the PAC file never leaves your machine. Functions like dnsResolve or isInNet with hostnames therefore return a documented empty value for hostnames instead of a fabricated answer - for IP addresses they work normally.

Which PAC functions are supported?

The complete standard Netscape PAC API: isPlainHostName, dnsDomainIs, localHostOrDomainIs, isInNet, shExpMatch, dnsDomainLevels, weekdayRange, dateRange, timeRange, plus the IPv6 extensions isInNetEx/isResolvableEx/myIpAddressEx. Date/time and the simulated local IP can be set for reproducible tests.

CentaurNexus is an independent product of SourcingBlox GmbH and the optimal complement to your Zscaler Security Stack - not an offering from Zscaler, Inc. Product and brand names belong to their respective owners. This tool is a non-binding self-assessment provided without warranty; real DNS resolution is deliberately not simulated (see FAQ).